CVE-2011-5054 kcheckpass passes a user-supplied argument to the pam_start function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended si...
MediumCVSS 6.9
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
kcheckpass passes a user-supplied argument to the pam_start function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122. NOTE: the vendor indicates that the possibility of resultant privilege escalation may be "a bit far-fetched."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| KDE kcheckpass | All versions | No fix listed |
References
- c-skills.blogspot.com
- [oss-security] 20111207 Disputing CVE-2011-4122 mailing-list
- [oss-security] 20111208 Re: Disputing CVE-2011-4122 mailing-list
- [oss-security] 20111224 Re: Disputing CVE-2011-4122 mailing-list
- [oss-security] 20111226 Re: Disputing CVE-2011-4122 mailing-list
- [oss-security] 20111228 Re: Disputing CVE-2011-4122 mailing-list
- [oss-security] 20111228 Re: Disputing CVE-2011-4122 mailing-list
- [oss-security] 20120102 Re: Disputing CVE-2011-4122 mailing-list
- [oss-security] 20120102 Re: Disputing CVE-2011-4122 mailing-list
- kcheckpass-pamstart-priv-esc(72230) vdb-entry